The opportunity
At Gusto, we're on a mission to grow the small business economy. We handle the hard stuff — payroll, health insurance, 401(k)s, and HR — so owners can focus on their craft and their customers.
What you'll do
Build and lead Gusto’s internal controls function, bringing business process: controls and IT controls together under a single program and developing the team needed to support both areas.
Own Gusto’s risk-based ICFR framework across financial processes and the: systems and data that support them, including scoping, control design, documentation, testing, issue evaluation, and remediation.
Strengthen the control environment supporting Gusto’s complex operations,: proprietary systems, and evolving products.
Partner early with Accounting, Finance, Product, Engineering, Data, Security,: and Risk to build control and auditability into new products, systems, and processes without creating unnecessary manual work or disruption.
Set the vision for an AI-forward internal controls function, using AI and: automation to rethink how risk is identified, evidence is evaluated, and controls are tested and monitored. Establish practical oversight for risks introduced by AI-enabled financial processes and software development.
Lead the relationship with external auditors, ensuring alignment on risk,: scope, testing, evidence, and remediation.
What they're looking for
- Establish clear governance and accountability for internal controls,: including training across Gusto and reporting to senior management and the Audit Committee on the program’s health and effectiveness.
- + years of progressive experience in a Big 4 accounting firm, internal audit,: or SOX compliance role program in a complex, scaling organization with professional certifications like CIA or CISA.
- + years of people leadership experience, with a track record of hiring,: coaching, and developing experienced controls professionals and distributing judgment and institutional knowledge across a team.
- Deep knowledge of US GAAP, the COSO framework, and the requirements: supporting management’s ICFR assessment and external auditor attestation.
